General IT Knowledge Base
 Search  


collapse all | expand all
Prevent Group Policy from applying to a certain user
Solution No. 28

How to prevent domain Group Policies from applying to certain user or computer accounts:

Use Group Policy Management Console

  1. Click Start, point to Administrative Tools, and then click Group Policy Management.
  2. In the console tree on the left, expand Forest.
  3. Expand Domains.
  4. Expand Domain Name.
  5. Expand Group Policy Objects.
  6. Click the Group Policy object that you do not want to apply to administrators.
  7. In the display pane on the right, click the Delegation tab.
  8. Click the Advanced button in the lower-right corner of the display pane.
  9. Click Add, and then type the account name that you do not want the Group Policy object to apply to.
  10. Click OK.

    Note Group Policy objects contain settings that apply to computer objects and to user objects. If you want only to restrict user settings from applying, add only the user account that you do not want the policy settings to apply to. If you want only to restrict computer settings from applying, add only the computer account that you do not want the policy settings to apply to. To add computer accounts, you have to click the Object Types button, and then click to select the Computers check box.
  11. Make sure that the newly-added account is selected in the Group or user names window. Then, scroll down in the Permissions window, and click to select the Deny check box for the Apply group policy permission.
  12. Click OK.
  13. Click Yes at the Windows Security prompt.